S3 audit log does not include the object version ID
Applies to
S3 Audit
Issue
S3 audit log does not include the object version ID
Example:
- Delete an object with a specific version ID
[root@rhel1 aws]# aws s3api delete-object --bucket bucket01 --key file1.txt --version-id xxxxxxxxxxxxxxxxxxxxxxxxxxx --endpoint-url http://xxx.xxx.xxx.xxx{ "DeleteMarker": true, "VersionId": “xxxxxxxxxxxxxxxxxxxxxxxxxxx"
- Audit log
{ "eventVersion": "2", "userIdentity": { "type": "Local User", "userName": "root" }, "eventTime": "2025-10-30T07:12:40.427607000Z", "eventSource": "svm1", "eventName": "DeleteObject", "sourceIPAddress": "xxx.xxx.xxx.xxx", "eventID": "d3af07e7-b55f-11f0-a6ba-005056b0e608", "readOnly": "False", "managementEvent": "False", "eventCategory": "Data", "requestID": "4154506597", "requestParameters": { "bucketName": "bucket01", "key": "file1.txt" },
